./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2465345513 <...> forked to background, child pid 3181 no interfaces have a carri[ 22.326015][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 er [ 22.338191][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.157' (ECDSA) to the list of known hosts. execve("./syz-executor2465345513", ["./syz-executor2465345513"], 0x7ffd823024c0 /* 10 vars */) = 0 brk(NULL) = 0x5555566dc000 brk(0x5555566dcc40) = 0x5555566dcc40 arch_prctl(ARCH_SET_FS, 0x5555566dc300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2465345513", 4096) = 28 brk(0x5555566fdc40) = 0x5555566fdc40 brk(0x5555566fe000) = 0x5555566fe000 mprotect(0x7f58982d7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+memory", 7) = 7 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 syzkaller login: [ 43.822105][ T3611] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) [ 43.958285][ T3611] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 getpid() = 3611 mkdir("./syzkaller.VTOiBg", 0700) = 0 chmod("./syzkaller.VTOiBg", 0777) = 0 chdir("./syzkaller.VTOiBg") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3612 attached , child_tidptr=0x5555566dc5d0) = 3612 [pid 3612] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3612] setsid() = 1 [pid 3612] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3612] unshare(CLONE_NEWNS) = 0 [pid 3612] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3612] unshare(CLONE_NEWIPC) = 0 [pid 3612] unshare(CLONE_NEWCGROUP) = 0 [pid 3612] unshare(CLONE_NEWUTS) = 0 [pid 3612] unshare(CLONE_SYSVSEM) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "16777216", 8) = 8 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "536870912", 9) = 9 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "8192", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3612] close(3) = 0 [pid 3612] getpid() = 1 [pid 3612] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b eb cc 48 c7 c7 44 66 de 8d e8 d3 73 80 00 e9 62 ff ff ff 48 [ 44.233859][ T3614] RSP: 0018:ffffc9000377fbe8 EFLAGS: 00010293 [ 44.239964][ T3614] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 44.248767][ T3614] RDX: ffff888025c19d80 RSI: ffffffff8147ff0d RDI: 0000000000000005 [ 44.256780][ T3614] RBP: ffff888075905000 R08: 0000000000000005 R09: 0000000000000000 [ 44.264842][ T3614] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000377fda0 [ 44.272887][ T3614] R13: ffffffff8bfdc2a0 R14: 1ffff920006eff84 R15: ffffc9000377fdc4 [ 44.280979][ T3614] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 44.289969][ T3614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.296648][ T3614] CR2: 0000000020000150 CR3: 0000000025a0b000 CR4: 0000000000350ef0 [ 44.304640][ T3614] Call Trace: [ 44.307982][ T3614] [ 44.310927][ T3614] cpuset_attach+0x92/0x520 [ 44.315454][ T3614] ? guarantee_online_cpus+0x4d0/0x4d0 [ 44.320998][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.326299][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.331523][ T3614] cgroup_migrate_execute+0xbc7/0x1220 [ 44.337028][ T3614] cgroup_attach_task+0x416/0x7c0 [ 44.342068][ T3614] ? cgroup_migrate+0x1f0/0x1f0 [ 44.347008][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.352223][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.357462][ T3614] cgroup_attach_task_all+0xde/0x140 [ 44.362792][ T3614] vhost_attach_cgroups_work+0x3a/0x90 [ 44.368330][ T3614] vhost_worker+0x23d/0x3d0 [ 44.372866][ T3614] ? vq_meta_prefetch+0x280/0x280 [ 44.377976][ T3614] kthread+0x2e4/0x3a0 [ 44.382064][ T3614] ? kthread_complete_and_exit+0x40/0x40 [ 44.387962][ T3614] ret_from_fork+0x1f/0x30 [ 44.392513][ T3614] [ 44.395596][ T3614] Kernel panic - not syncing: panic_on_warn set ... [ 44.402184][ T3614] CPU: 0 PID: 3614 Comm: vhost-3613 Not tainted 6.0.0-rc2-syzkaller-00054-gc40e8341e3b3 #0 [ 44.412148][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 44.422191][ T3614] Call Trace: [ 44.425457][ T3614] [ 44.428381][ T3614] dump_stack_lvl+0xcd/0x134 [ 44.432988][ T3614] panic+0x2c8/0x627 [ 44.436877][ T3614] ? panic_print_sys_info.part.0+0x10b/0x10b [ 44.443288][ T3614] ? __warn.cold+0x248/0x2c4 [ 44.447877][ T3614] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 44.453417][ T3614] __warn.cold+0x259/0x2c4 [ 44.457828][ T3614] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 44.463717][ T3614] report_bug+0x1bc/0x210 [ 44.468048][ T3614] handle_bug+0x3c/0x60 [ 44.472200][ T3614] exc_invalid_op+0x14/0x40 [ 44.476698][ T3614] asm_exc_invalid_op+0x16/0x20 [ 44.481541][ T3614] RIP: 0010:lockdep_assert_cpus_held+0xbd/0xe0 [ 44.487688][ T3614] Code: e8 38 0c 34 00 be ff ff ff ff 48 c7 c7 70 64 e3 8b e8 37 71 37 08 31 ff 89 c3 89 c6 e8 dc 08 34 00 85 db 75 d5 e8 13 0c 34 00 <0f> 0b eb cc 48 c7 c7 44 66 de 8d e8 d3 73 80 00 e9 62 ff ff ff 48 [ 44.507295][ T3614] RSP: 0018:ffffc9000377fbe8 EFLAGS: 00010293 [ 44.513353][ T3614] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 44.521488][ T3614] RDX: ffff888025c19d80 RSI: ffffffff8147ff0d RDI: 0000000000000005 [ 44.529449][ T3614] RBP: ffff888075905000 R08: 0000000000000005 R09: 0000000000000000 [ 44.537412][ T3614] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000377fda0 [ 44.545373][ T3614] R13: ffffffff8bfdc2a0 R14: 1ffff920006eff84 R15: ffffc9000377fdc4 [ 44.553343][ T3614] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 44.558889][ T3614] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 44.564424][ T3614] cpuset_attach+0x92/0x520 [ 44.568929][ T3614] ? guarantee_online_cpus+0x4d0/0x4d0 [ 44.574384][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.579667][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.584862][ T3614] cgroup_migrate_execute+0xbc7/0x1220 [ 44.590329][ T3614] cgroup_attach_task+0x416/0x7c0 [ 44.595437][ T3614] ? cgroup_migrate+0x1f0/0x1f0 [ 44.600291][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.605480][ T3614] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.610760][ T3614] cgroup_attach_task_all+0xde/0x140 [ 44.616040][ T3614] vhost_attach_cgroups_work+0x3a/0x90 [ 44.621496][ T3614] vhost_worker+0x23d/0x3d0 [ 44.625994][ T3614] ? vq_meta_prefetch+0x280/0x280 [ 44.631012][ T3614] kthread+0x2e4/0x3a0 [ 44.635073][ T3614] ? kthread_complete_and_exit+0x40/0x40 [ 44.641312][ T3614] ret_from_fork+0x1f/0x30 [ 44.645738][ T3614] [ 44.650074][ T3614] Kernel Offset: disabled [ 44.654469][ T3614] Rebooting in 86400 seconds..